CVE-2019-0074
Summary
| CVE | CVE-2019-0074 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-10-09 20:15:00 UTC |
| Updated | 2021-02-05 16:48:00 UTC |
| Description | A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine (NG-RE) allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series with Next-Generation Routing Engine (NG-RE) which uses vmhost. This issue affects Juniper Networks Junos OS on NFX150 Series and QFX10K, EX9200 Series, MX Series and PTX Series with NG-RE and vmhost: 15.1F versions prior to 15.1F6-S12 16.1 versions starting from 16.1R6 and later releases, including the Service Releases, prior to 16.1R6-S6, 16.1R7-S3; 17.1 versions prior to 17.1R3; 17.2 versions starting from 17.2R1-S3, 17.2R3 and later releases, including the Service Releases, prior to 17.2R3-S1; 17.3 versions starting from 17.3R1-S1, 17.3R2 and later releases, including the Service Releases, prior to 17.3R3-S3; 17.4 versions starting from 17.4R1 and later releases, including the Service Releases, prior to 17.4R1-S6, 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S2, 18.3R2; 18.4 versions prior to 18.4R1-S1, 18.4R2. This issue does not affect: Juniper Networks Junos OS 15.1 and 16.2. |
Risk And Classification
Problem Types: CWE-22
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Juniper | Ex9200 | - | All | All | All |
| Hardware | Juniper | Ex9200 | - | All | All | All |
| Operating System | Juniper | Junos | 15.1 | f1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f5 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6-s3 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6-s1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r7 | All | All |
| Operating System | Juniper | Junos | 17.1 | - | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s10 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s3 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s4 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s5 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s6 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | - | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s8 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2-s6 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 18.1 | - | All | All |
| Operating System | Juniper | Junos | 18.1 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 18.2 | - | All | All |
| Operating System | Juniper | Junos | 18.2 | r1-s5 | All | All |
| Operating System | Juniper | Junos | 18.2x75 | - | All | All |
| Operating System | Juniper | Junos | 18.2x75 | d20 | All | All |
| Operating System | Juniper | Junos | 18.3 | - | All | All |
| Operating System | Juniper | Junos | 18.3 | r1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 18.4 | - | All | All |
| Operating System | Juniper | Junos | 18.4 | r1 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s1 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s2 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f2-s4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f3 | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f5 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6-s3 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6-s1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r7 | All | All |
| Operating System | Juniper | Junos | 17.1 | - | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s10 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s3 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s4 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s5 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s6 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | - | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s8 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2-s6 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 18.1 | - | All | All |
| Operating System | Juniper | Junos | 18.1 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 18.2 | - | All | All |
| Operating System | Juniper | Junos | 18.2 | r1-s5 | All | All |
| Operating System | Juniper | Junos | 18.2x75 | - | All | All |
| Operating System | Juniper | Junos | 18.2x75 | d20 | All | All |
| Operating System | Juniper | Junos | 18.3 | - | All | All |
| Operating System | Juniper | Junos | 18.3 | r1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 18.4 | - | All | All |
| Operating System | Juniper | Junos | 18.4 | r1 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s2 | All | All |
| Hardware | Juniper | Nfx150 | - | All | All | All |
| Hardware | Juniper | Nfx150 | - | All | All | All |
| Hardware | Juniper | Qfx10002 | - | All | All | All |
| Hardware | Juniper | Qfx10002 | - | All | All | All |
| Hardware | Juniper | Qfx10008 | - | All | All | All |
| Hardware | Juniper | Qfx10008 | - | All | All | All |
| Hardware | Juniper | Qfx10016 | - | All | All | All |
| Hardware | Juniper | Qfx10016 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2019-10 Security Bulletin: Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure. (CVE-2019-0074) - Juniper Networks | MISC | kb.juniper.net | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 43712 Juniper Junos Directory traversal vulnerability(JSA10975)